summaryrefslogtreecommitdiffstats
path: root/net/netfilter/nft_compat.c
AgeCommit message (Expand)AuthorFilesLines
2019-06-19treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500Thomas Gleixner1-4/+1
2019-04-27netlink: make validation more configurable for future strictnessJohannes Berg1-2/+2
2019-02-27netfilter: nft_compat: use .release_ops and remove list of extensionPablo Neira Ayuso1-226/+55
2019-02-13netfilter: nft_compat: use-after-free when deleting targetsPablo Neira Ayuso1-1/+2
2019-02-05netfilter: nft_compat: don't use refcount_inc on newly allocated entryFlorian Westphal1-39/+23
2019-02-04netfilter: nf_tables: unbind set in rule from commit pathPablo Neira Ayuso1-1/+5
2019-01-18netfilter: nft_compat: destroy function must not have side effectsFlorian Westphal1-1/+47
2019-01-18netfilter: nft_compat: make lists per netnsFlorian Westphal1-40/+89
2019-01-18netfilter: nft_compat: use refcnt_t type for nft_xt reference countFlorian Westphal1-8/+8
2018-11-13netfilter: nf_tables: fix use-after-free when deleting compat expressionsFlorian Westphal1-1/+2
2018-11-03netfilter: nft_compat: ebtables 'nat' table is normal chain typeFlorian Westphal1-9/+12
2018-10-11netfilter: nft_compat: do not dump private areaPablo Neira Ayuso1-2/+22
2018-07-09netfilter: nft_compat: explicitly reject ERROR and standard targetFlorian Westphal1-0/+13
2018-05-29netfilter: nft_compat: use call_rcu for nfnl_compat_getFlorian Westphal1-11/+18
2018-05-09netfilter: nft_compat: fix handling of large matchinfo sizeFlorian Westphal1-1/+63
2018-05-09netfilter: nft_compat: prepare for indirect info storageFlorian Westphal1-11/+36
2018-05-08netfilter: nf_tables: nft_compat: fix refcount leak on xt moduleFlorian Westphal1-34/+58
2018-01-19netfilter: remove messages print and boot/module load timePablo Neira Ayuso1-2/+0
2018-01-10netfilter: nf_tables: add single table list for all familiesPablo Neira Ayuso1-8/+8
2018-01-08netfilter: nf_tables: remove multihook chains and familiesPablo Neira Ayuso1-4/+4
2017-07-19netfilter: nft_compat: check extension hook mask only if setPablo Neira Ayuso1-2/+2
2017-06-19netfilter: nfnetlink: extended ACK reportingPablo Neira Ayuso1-1/+2
2017-05-01Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-nextDavid S. Miller1-6/+7
2017-04-13netlink: pass extended ACK struct to parsing functionsJohannes Berg1-1/+1
2017-04-07netfilter: Add nfnl_msg_type() helper functionPablo Neira Ayuso1-1/+1
2017-04-06netfilter: nf_tables: add nft_is_base_chain() helperPablo Neira Ayuso1-5/+6
2017-03-06netfilter: nf_tables: validate the expr explicitly after init successfullyLiping Zhang1-8/+0
2016-07-23netfilter: nft_compat: fix crash when related match/target module is removedLiping Zhang1-23/+20
2016-07-23netfilter: nft_compat: put back match/target module if init failLiping Zhang1-8/+24
2016-03-11netfilter: nft_compat: check match/targetinfo attr sizeFlorian Westphal1-0/+6
2015-12-28netfilter: nfnetlink: pass down netns pointer to call() and call_rcu()Pablo Neira Ayuso1-3/+3
2015-09-14netfilter: nft_compat: skip family comparison in case of NFPROTO_UNSPECPablo Neira Ayuso1-6/+18
2015-05-15netfilter: x_tables: add context to know if extension runs from nft_compatPablo Neira Ayuso1-0/+2
2015-04-13netfilter: nf_tables: get rid of NFT_REG_VERDICT usagePatrick McHardy1-13/+13
2015-04-08netfilter: Fix switch statement warnings with recent gcc.David Miller1-3/+3
2015-03-23Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller1-0/+6
2015-03-22netfilter: nft_compat: set IP6T_F_PROTO flag if protocol is setPablo Neira Ayuso1-0/+6
2015-03-09Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller1-7/+7
2015-03-03Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller1-2/+10
2015-03-02netfilter: nft_compat: add support for arptables extensionsArturo Borrero1-0/+9
2015-02-22netfilter: nft_compat: don't truncate ethernet protocol type to u8Arturo Borrero1-7/+7
2015-02-20Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nfDavid S. Miller1-2/+10
2015-02-16netfilter: nft_compat: fix module refcount underflowPablo Neira Ayuso1-2/+10
2015-01-30netfilter: nft_compat: add ebtables supportArturo Borrero1-6/+57
2014-11-12netfilter: nft_compat: use the match->table to validate dependenciesPablo Neira Ayuso1-2/+2
2014-11-12netfilter: nft_compat: relax chain type validationPablo Neira Ayuso1-30/+2
2014-11-12netfilter: nft_compat: use current net namespacePablo Neira Ayuso1-2/+2
2014-10-27netfilter: nft_compat: fix wrong target lookup in nft_target_select_ops()Arturo Borrero1-1/+1
2014-10-18netfilter: nft_compat: validate chain type in match/targetPablo Neira Ayuso1-9/+66
2014-10-14netfilter: nft_compat: fix hook validation for non-base chainsPablo Neira Ayuso1-0/+4